72b9dfc9dead0b5e4ed9293095d7a08d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72b9dfc9dead0b5e4ed9293095d7a08d_JaffaCakes118
Size

209KB
MD5

72b9dfc9dead0b5e4ed9293095d7a08d
SHA1

f460d51461c33b61f11110e009e69c178c2c675c
SHA256

c16d062cfeb49478ed8801e3ac1c2c2539ceaf1f80b63a39cb55a8e575d5f3fc
SHA512

027151c18c179ea2036563533dfc470d48aae91f0e61dc49b835e1962cdabf3181ac970ae2871f724ae985097661fa91cbcc9d3d79ff590783a58f9f9c0df654
SSDEEP

3072:zlN01pziqx+rTAgNaDQyPJZXEnQ2SO8ipItvCaf6Xag1xBX:5upAopBZ8mt/ya0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72b9dfc9dead0b5e4ed9293095d7a08d_JaffaCakes118

Files

72b9dfc9dead0b5e4ed9293095d7a08d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

62279f1b9b9523fe4ad0e86fdd65eddf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharNextA
GetDC
GetDesktopWindow
GetSystemMetrics

kernel32

lstrcmpA
GetCommandLineW
GetTickCount
GetLastError
GetCurrentProcess
GetModuleHandleA
GlobalFindAtomA
GlobalFindAtomW
GetUserDefaultLangID
GetConsoleOutputCP
RemoveDirectoryA
GetCurrentProcessId
GetDriveTypeA
lstrlenW
MulDiv
GetStartupInfoA
SetCurrentDirectoryA
GetWindowsDirectoryA
GetCurrentThreadId
QueryPerformanceCounter
GetProcessHeap
GetACP
DeleteFileW
SetLastError
Sleep
GetCurrentThread
IsDebuggerPresent
GetModuleHandleW
GetCommandLineA
DeleteFileA
GetThreadLocale
lstrlenA
GetOEMCP
lstrcmpiW
VirtualAlloc
LoadLibraryW
CopyFileA
lstrcmpiA
GetVersion

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE